Security + quiz 16

A Chief Information Security Officer (CISO) is concerned about the organization's ability to continue business operation in the event of a prolonged DDoS attack on its local datacenter that consumes database resources. Which of the following will the CISO MOST likely recommend to mitigate this risk?

• Upgrade the bandwidth available into the datacenter

• Implement a hot-site failover location

• Switch to a complete SaaS offering to customers

• Implement a challenge response test on all end-user queries

An organization is concerned that is hosted web servers are not running the most updated version of the software. Which of the following would work BEST to help identify potential vulnerabilities?

• Hping3 -s comptia, org -p 80

• Nc -1 v comptia, org p 80

• nmp comptia, org p 80 aV

• nslookup port=80 comtia.org

An incident response technician collected a mobile device during an investigation. Which of the following should the technician do to maintain chain of custody?

• Document the collection and require a sign-off when possession changes.

• Lock the device in a safe or other secure location to prevent theft or alteration.

• Place the device in a Faraday cage to prevent corruption of the data.

• Record the collection in a blockchain-protected public ledger.

An organization's RPO for a critical system is two hours. The system is used Monday through Friday, from 9:00 am to 5:00 pm. Currently, the organization performs a full backup every Saturday that takes four hours to complete. Which of the following additional backup implementations would be the BEST way for the analyst to meet the business requirements?

• Incremental backups Monday through Friday at 6:00 p.m and differential backups hourly

• Full backups Monday through Friday at 6:00 p.m and incremental backups hourly.

• incremental backups Monday through Friday at 6:00 p.m and full backups hourly

• Full backups Monday through Friday at 6:00 p.m and differential backups hourly

A security analyst discovers that a company username and password database was posted on an internet forum. The username and passwords are stored in plan text. Which of the following would mitigate the damage done by this type of data exfiltration in the future?

• Create DLP controls that prevent documents from leaving the network

• Implement salting and hashing

• Configure the web content filter to block access to the forum.

• Increase password complexity requirements

After a ransomware attack a forensics company needs to review a cryptocurrency transaction between the victim and the attacker. Which of the following will the company MOST likely review to trace this transaction?

• The public ledger

• The NetFlow data

• A checksum

• The event log

Which of the following is a team of people dedicated testing the effectiveness of organizational security programs by emulating the techniques of potential attackers?

• Red team

• While team

• Blue team

• Purple team

Which of the following job roles would sponsor data quality and data entry initiatives that ensure business and regulatory requirements are met?

• The data owner

• The data processor

• The data steward

• The data privacy officer.

A retail executive recently accepted a job with a major competitor. The following week, a security analyst reviews the security logs and identifies successful logon attempts to access the departed executive's accounts. Which of the following security practices would have addressed the issue?

• A non-disclosure agreement

• Least privilege

• An acceptable use policy

• Ofboarding

A network administrator would like to configure a site-to-site VPN utilizing iPSec. The administrator wants the tunnel to be established with data integrity encryption, authentication and anti- replay functions. Which of the following should the administrator use when configuring the VPN?

• AH

• EDR

• ESP

• DNSSEC